Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

gkrellm-newsticker - multiple vulnerabilities

Package(s):

gkrellm-newsticker

CVE #(s):

CAN-2003-0205 CAN-2003-0206

Created:

April 23, 2003

Updated:

April 23, 2003

Description:

gkrellm-newsticker has two vulnerabilities: a denial of service problem and a failure to filter shell metacharacters which can allow an attacker to run arbitrary commands by way of a hostile (or compromised) news feed.

Alerts:

Debian

DSA-294-1

2003-04-23

(Log in to post comments)